The website that I used for this malvertising chain was much smaller in terms of traffic than my previous runs. In total the site received an estimated 126,000 visitors in July, 2017. According to Alexa it is currently ranked around 200,000 globally and 44,000 in the United States.

Below is a flowchart of the infection chain:

Below are the TCP streams from the infection chain:

302 Found from syndication.exoclick.com. Points to subdomain on .voluumtrk.com

302 Found from .voluumtrk.com. Points to 194[.]58[.]38[.]50/usa194[.]58[.]38[.]50/usa redirects to 194[.]58[.]38[.]50/usa/